similar to: TGT Passing in 3.7

Is something special required for KerbV auth to work? I've enabled: KerberosAuthentication yes on some test boxes and it doesn't work. I do a kinit, and then ssh and it asks for a password. If you don't provide one, you don't get in.

After reading some more from the archives, a private email, and some general research, I see that KerbV support has been dropped in favor of GSSAPI. Which is fine, and wonderful, I support GSSAPI. But, erm, the announcement says, "This release contains some GSSAPI user authentication support to replace legacy KerberosV authentication support. At present this code is still considered

Hey folks, I've asked this on the security focus mailing list, but no one seems to know... I'm in the process of moving my company from old crufty ssh.com ssh1 to openssh. On most of our hosts, we've created rsa and dsa keys but managed to KEEP the old rsa1 key... However, on a few hosts, openssh has been unable to read the old rsa1 key and has claimed: debug1: Unsupported

Hey folks, As part of a local change, we like to authlog the commands executed via command line, i.e.: ssh user at host "somecommand" And I was able to modify session.c like so: -------------------------------------- case SSH_CMSG_EXEC_CMD: if (type == SSH_CMSG_EXEC_CMD) { command = packet_get_string(&dlen);

This isn't really a dev question, but its also not a 'user' question either... At USC, we've setup a large mirror. One of the many things we are mirroring is openssh. I tried to contact miod at openbsd.org which I believe I got from the website, but I got no response. Anyway, the mirror is available through HTTP, FTP, and RSYNC: http://mirrors.usc.edu/pub/openssh/

This is a fairly inconsequential patch, but it comes in handy in a few instances. The patch simply splits install-files into "install-files" and "install-sysconf" - taking all of the sysconfdir stuff and putting in its own target which I then added to 'install' and 'install-nokeys'. I then added an install-nosysconf to NOT do that stuff. This helped us

I figure this probably isn't the most appropriate place for this question, buuuuut, I can't seem to find the information I need on the [http|ftp] site. I'm responsible for a new Mirror site here at USC, and one of the many things we would like to mirror is the OpenSSH software. However, I can't seem to find the following information: - What is the prefered place to mirror

Folks, I seem to have a problem when I upgraded our kerberos from 1.3.1 to 1.4.1 (MIT krb 5), all of a sudden I can't ssh as another user. i.e. ssh host works but ssh joe at host doesn't work. Same with scp's. I've tried recompiling ssh (even though the so-name of kerb libs didn't change), but it didn't work, and still no go... I'm using openssh 3.9p1 on Solaris

https://bugzilla.mindrot.org/show_bug.cgi?id=3123 Bug ID: 3123 Summary: PermitOpen does not allow wildcards for hosts despite what docs say Product: Portable OpenSSH Version: 7.2p2 Hardware: Other OS: Linux Status: NEW Severity: normal Priority: P5 Component: sshd

2 Days Beijing Will Tour Beijing Tour Cope Beijing city with development history over 3000 years carries grouped t(blank) Beijing development Beijing city with development history over 3000 yrs has clustered that has a surplus of Beijing Attractions. Regardless of what befits you on Chinese cultural heritages, purely natural sceneries, parks and gardens, modern landmarks or traditional

On Mon, 12 February 2001, OmegaDan wrote: [snip code] Hmm, weird.. that does work for me. I only had the trouble that ov_time_tell returned negative infinity after a ov_time_seek to 0 secs. This is my code: function TMainForm.ReadBuf(Buffer: PChar; Size: Longword; var Time: Single): Longword; var BytesRead, Change: Longword; begin BytesRead := 0; Time := ov_time_tell(vf^); if Time <

Hello, If you call ov_time_tell(vf) after a ov_time_seek(vf, 0), it returns Not A Number (Negative Infinity). I tested this only using Win32 MSVC++ 6 Dynamic, Release. Does it also occur on other platforms? Is this the right behaviour? Seems wrong to me. Anyway, it caused a range check error in my code, and a divide by zero when I disable range checking (I'm using Borland Delphi 5). I

Hello, When the Winamp plugin is playing an Ogg Vorbis file, if you try to scroll the playlist so that the title of the Ogg file scrolls out of view, it jumps back again, which is very annoying. The fix: In function DecodeThread, replace if(lostsync || (decode_pos_ms - lastupdate > 500)) { ... mod.SetInfo(bitrate / 1000, samplerate / 1000, num_channels, 1); by if(lostsync ||

Hi, What is/will be the support for Kerberos TGT tickets in Samba 3.0 ? I am trying to find a way to authenticate users on both Windows and unix stations against the same KDC (MIT) and it would help if Samba was able to grant access based on TGT tickets delivered to the windows client and then deliver accounting information to the stations. I am afraid this follow no standart protocol, but i

I have been trying to setup Samba4 as a DC using kerberos for authentication. I have successfully provisioned the domain, and was able to join my domain using my windows machine as well as kinit to obtain a ticket for my administrator user from my servers. I have hit a wall trying to setup a server to authenticate a SPN using a keytab. I can join the domain and kinit as my administrator user,

http://bugzilla.mindrot.org/show_bug.cgi?id=324 Summary: privsep break KRB4 auth, KRB4 TGT forwarding and AFS token forwarding Product: Portable OpenSSH Version: -current Platform: All OS/Version: All Status: NEW Severity: normal Priority: P2 Component: sshd AssignedTo:

Guys is it possible on samba 4 to raise the expiry time on tgt tickets to be more than 10 hours ? I have users running scripts that need a longer expiry time on the token on another side note is it the Samba 4 DC that decides the renewal date of the tokens also ? Regards -- Damien Dye IT Manager *Sondrel Ltd* Sondrel House, Theale Lakes Business Park Moulden Way, Sulhamstead, Berkshire,

http://bugzilla.mindrot.org/show_bug.cgi?id=44 ------- Additional Comments From jan.iven at cern.ch 2002-07-05 01:11 ------- Update: I have reported this to the glibc people, who say that they will not modify their mkstemp(). (http://bugs.gnu.org/cgi-bin/gnatsweb.pl?debug=&database=default&cmd=view+audit-trail&cmd=view&pr=3573) Attached is a patch to configure{ac,in} to

http://bugzilla.mindrot.org/show_bug.cgi?id=324 ------- Additional Comments From jan.iven at cern.ch 2002-06-30 09:19 ------- Created an attachment (id=125) KRB4/KRB5/AFS with privsep ------- You are receiving this mail because: ------- You are the assignee for the bug, or are watching the assignee.

http://bugzilla.mindrot.org/show_bug.cgi?id=44 djm at mindrot.org changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |RESOLVED Resolution| |FIXED ------- Additional Comments From djm at mindrot.org 2003-01-07 15:18